THREAT OPS › CVEs › CVE-2026-68820
CVE-2026-68820 — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.
Vulnerability details
- Affected productsWindows Ancillary Function Driver for WinSock
- KEV remediation due2026-08-25
Related reporting
- August 2026 CVE Landscaperecordedfuture
- CVE-2026-68820 is in KEV. Here Is What CISA BOD 26-04 Actually Requires Nowqualys
- 17th August – Threat Intelligence Reportcheckpoint_research
- August 2026 Patch Tuesday: 421 Flaws, 3 Zero-Dayssocradar_blog
- Lazarus hackers exploited Windows zero-day to target defense firmsbleepingcomputer
- Microsoft Patch Tuesday, August 2026 Security Update Reviewqualys
- Patch Tuesday - August 2026rapid7
- Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilitiestalos
- Microsoft Plugs Nearly 400 Security Holeskrebs
- Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attackthehackernews
- CISA Adds Three Known Exploited Vulnerabilities to Catalogcisa_advisories
- [CISA KEV] CVE-2026-68820 — Microsoft Windows Ancillary Function Driver for WinSock : Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerabilitycisa_kev
- The August 2026 Security Update Reviewzdi_blog
- Shattering the Dream – When a Job Offer Becomes a Zero-Day Attackcheckpoint_research
- Microsoft's August 2026 Patch Tuesday Addresses 398 CVEs (CVE-2026-68820)tenable